Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d5ff663c-6577-4c42-9b77-ee5cef5cc05a.roa
File:                     d5ff663c-6577-4c42-9b77-ee5cef5cc05a.roa (raw, json)
Hash identifier:          ahVa5wSyoZmBWi4EV+xJb4alrdJyFuH134jLoRvLlEw=
Subject key identifier:   C6:C2:22:4C:68:C9:3D:33:AB:5B:F3:EE:4A:09:FA:B3:8B:26:DA:A9
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       2B8849D5533411909193BE03C01A8F0B30F09F28
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d5ff663c-6577-4c42-9b77-ee5cef5cc05a.roa
Signing time:             Tue 24 Jun 2025 00:51:12 +0000
ROA not before:           Tue 24 Jun 2025 00:51:12 +0000
ROA not after:            Tue 29 Jul 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        18.96.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:88:49:d5:53:34:11:90:91:93:be:03:c0:1a:8f:0b:30:f0:9f:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jun 24 00:51:12 2025 GMT
            Not After : Jul 29 23:59:59 2025 GMT
        Subject: serialNumber=d328e8952a257141999753c37c707ec12a18f70de1abd7cbc071bae71c7713b0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:63:4c:30:3e:66:a2:6e:8a:48:87:da:dd:10:
                    64:bc:7a:7c:3e:96:94:d2:c8:79:86:f1:80:72:32:
                    78:fa:c5:76:76:8e:45:5b:a0:16:9f:23:4e:5f:4c:
                    61:23:a7:98:bd:a0:59:28:7e:5a:dd:fb:ae:9b:6b:
                    24:b5:b0:c8:bb:90:b0:82:af:20:5f:0a:62:bf:63:
                    42:48:1e:ef:40:8d:65:ce:72:8e:6f:1e:bf:d9:88:
                    56:f8:ab:0d:b0:bf:06:93:c6:17:c4:c5:b1:9b:8c:
                    d5:61:ba:be:77:ba:82:b0:01:ee:d0:77:6f:90:25:
                    ad:ce:2a:d2:e6:c5:11:d7:d4:b3:fb:82:10:10:d7:
                    a0:43:1c:e8:cc:88:55:1e:6a:d4:e3:f8:1d:24:fa:
                    51:09:8f:c9:67:20:a9:c8:87:49:95:59:ae:da:1b:
                    85:dd:ea:a5:cc:3d:6d:29:78:62:17:0a:73:26:97:
                    be:4c:71:d3:6f:9a:58:62:d9:10:e1:05:ad:bf:6a:
                    ca:bc:f5:e8:60:af:6b:ff:9e:9a:93:42:b6:b4:a6:
                    89:0b:d2:56:15:e8:a5:3e:61:c2:60:55:a9:f6:66:
                    b4:8a:74:ee:2b:db:4b:ce:12:e8:01:0a:8b:86:55:
                    b8:0d:f7:af:18:2c:ed:d7:58:f8:c9:ee:68:c4:95:
                    17:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:C2:22:4C:68:C9:3D:33:AB:5B:F3:EE:4A:09:FA:B3:8B:26:DA:A9
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d5ff663c-6577-4c42-9b77-ee5cef5cc05a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.96.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         3b:cd:72:d5:2a:01:95:fc:6d:c6:47:2e:03:b1:88:8a:28:8c:
         27:5a:3a:55:fb:63:7c:24:89:17:6f:72:0b:fc:16:a3:eb:e6:
         dc:99:3b:6b:2f:64:43:58:4d:71:03:3a:b3:26:5b:17:ea:c8:
         b5:2e:db:f6:90:19:a9:fc:2f:74:51:6f:bd:19:a4:6f:6f:ab:
         e4:4f:bb:a5:0e:82:dd:f1:87:f4:3a:8d:ec:71:57:74:1b:9c:
         87:c9:86:c3:9a:05:8d:81:bc:e9:7b:12:24:14:94:c3:7d:e7:
         e4:05:72:87:5a:1d:ba:9f:67:3d:fe:20:cb:46:fd:5a:f8:16:
         7f:08:c0:9e:ba:61:eb:6f:73:ac:40:3c:c4:e5:a6:6b:05:24:
         7c:37:23:42:79:f3:db:cc:d0:17:27:1a:84:7e:91:e2:f7:b9:
         8b:2e:d3:f4:f2:36:3f:a2:0a:d5:71:db:4d:98:64:18:e3:d7:
         f7:e4:6c:a8:37:d8:53:98:11:a0:f3:ff:bb:a6:00:2a:eb:41:
         24:f2:3f:50:e9:ab:35:6d:8a:20:85:02:1d:be:46:3c:a6:5a:
         1f:c9:0c:ad:e6:91:0c:24:39:c3:13:16:98:bb:81:8a:69:f4:
         89:c4:46:01:5d:7a:cf:30:3e:68:e4:9c:6e:1b:58:95:26:49:
         82:98:b7:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 18:35:47 2025 by rpki-client